$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/ad2336b0-b476-3593-a1a4-d7d8831af0b5.roa File: ad2336b0-b476-3593-a1a4-d7d8831af0b5.roa (raw, json) Hash identifier: qFWUa+URm3yQNHknEPuw7QE406YO+Y7YHajeqByz0F0= Subject key identifier: 01:8B:39:AB:44:C2:5F:D5:FE:01:AA:47:D9:58:07:0A:84:79:05:54 Certificate issuer: /CN=824dfb5f-8580-48ff-b32e-fd393fa7dcc4 Certificate serial: 010D0C9F4328584AE0311A51751F94FFBB09BAC0 Authority key identifier: D9:84:FC:01:25:1A:F5:E5:ED:9B:B3:69:50:58:31:B7:12:47:29:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/ad2336b0-b476-3593-a1a4-d7d8831af0b5.roa Signing time: Sat 16 Aug 2025 13:00:42 +0000 ROA not before: Sat 16 Aug 2025 13:00:42 +0000 ROA not after: Fri 14 Nov 2025 14:00:42 +0000 asID: 13335 IP address blocks: 2620:12c:90af::/48 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e0:31:1a:51:75:1f:94:ff:bb:09:ba:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=824dfb5f-8580-48ff-b32e-fd393fa7dcc4 Validity Not Before: Aug 16 13:00:42 2025 GMT Not After : Nov 14 14:00:42 2025 GMT Subject: CN=ae249434-dc7d-4e56-80c0-ca754457caab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:53:00:b5:0c:cc:46:a4:84:c2:e0:fd:e3:be: 8d:e5:b8:d8:d1:aa:ff:c9:59:2b:87:d5:c2:d1:d2: 09:f1:19:61:72:c1:bd:5f:6a:bf:03:ba:16:c0:25: 7e:b3:59:46:9d:32:3a:5d:6c:2d:b5:98:b0:82:9a: 68:ff:ca:2f:ad:9d:9d:8e:10:e7:f0:f3:fd:3d:20: 9d:98:9b:52:e6:f7:1a:c9:d5:a8:04:82:93:19:9a: 7d:c7:22:ba:5f:b4:d2:cb:ef:60:71:b0:f6:60:e3: c6:d9:e5:cd:39:54:4a:55:7a:c5:72:e9:fa:56:a6: 18:ed:2d:c0:2d:c7:39:41:f3:cd:55:a9:32:ec:ed: 6f:81:d7:0d:be:f9:23:ae:6f:a2:a9:dd:16:ff:59: 5d:c9:ce:23:9e:cc:b9:60:5e:e2:4e:a4:39:00:1b: c5:ca:0f:7a:52:f1:d6:af:1b:7f:f5:a4:1c:d3:28: 8d:2f:eb:31:02:0e:89:0f:ab:4f:58:18:e7:a7:ca: ae:ce:81:b6:9d:73:0c:f0:a7:ea:5c:60:83:a1:13: 4b:65:86:04:e9:34:fe:5e:16:2a:41:83:b5:04:57: 7c:df:44:8d:b0:16:be:da:ff:57:c1:23:bc:a2:ef: 99:24:32:7d:04:8b:62:92:2c:92:41:c6:8e:c3:0e: 18:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:8B:39:AB:44:C2:5F:D5:FE:01:AA:47:D9:58:07:0A:84:79:05:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/ad2336b0-b476-3593-a1a4-d7d8831af0b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.crl X509v3 Authority Key Identifier: keyid:D9:84:FC:01:25:1A:F5:E5:ED:9B:B3:69:50:58:31:B7:12:47:29:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer sbgp-ipAddrBlock: critical IPv6: 2620:12c:90af::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:79:7e:e4:b9:4a:d6:65:72:65:30:65:90:7d:b5:ba:0f:e8: 42:4c:64:e4:ac:53:63:c7:49:00:93:3e:c3:c8:9f:45:20:7c: 9e:f9:88:1d:75:98:e8:11:04:9b:7b:93:51:c1:05:47:5e:47: ad:99:97:ee:b4:46:3d:b7:6b:b9:99:7b:09:f2:2b:76:05:b3: 2b:55:ab:6f:9c:d6:8d:4e:e4:ce:a9:60:b2:21:fb:0e:72:bc: 71:23:44:5f:b8:16:47:9f:df:4d:8a:ae:fd:2a:c1:bb:2f:e1: 20:e2:77:0e:fb:1c:00:a2:60:44:6b:01:56:2d:11:fa:d2:52: 9e:2e:56:ca:0f:9f:41:e7:b1:15:d8:8d:20:74:31:e2:bf:82: cb:51:9e:6a:e4:da:ef:77:bc:f7:20:ea:29:77:59:8b:3b:41: 38:71:c1:5f:6c:01:02:fb:a3:d0:fb:9d:97:db:cf:62:7e:ca: 33:cf:cb:20:a9:fd:fd:16:fe:2a:57:07:9b:0f:0a:e6:8d:0c: a8:a8:b3:a1:68:10:5a:1e:9e:84:60:9d:b8:60:8d:86:22:2d: b7:dc:b6:0c:8b:9b:bf:37:77:1b:31:c5:43:18:03:05:94:74: 69:75:fa:68:2e:45:cd:bd:80:d5:ec:f0:29:ee:f6:70:1d:78: af:6d:be:71 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErgMRpRdR+U/7sJusAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODI0ZGZiNWYtODU4MC00OGZmLWIzMmUtZmQzOTNmYTdk Y2M0MB4XDTI1MDgxNjEzMDA0MloXDTI1MTExNDE0MDA0MlowLzEtMCsGA1UEAxMk YWUyNDk0MzQtZGM3ZC00ZTU2LTgwYzAtY2E3NTQ0NTdjYWFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFMAtQzMRqSEwuD9476N5bjY0ar/yVkrh9XC 0dIJ8RlhcsG9X2q/A7oWwCV+s1lGnTI6XWwttZiwgppo/8ovrZ2djhDn8PP9PSCd mJtS5vcaydWoBIKTGZp9xyK6X7TSy+9gcbD2YOPG2eXNOVRKVXrFcun6VqYY7S3A Lcc5QfPNVaky7O1vgdcNvvkjrm+iqd0W/1ldyc4jnsy5YF7iTqQ5ABvFyg96UvHW rxt/9aQc0yiNL+sxAg6JD6tPWBjnp8quzoG2nXMM8KfqXGCDoRNLZYYE6TT+XhYq QYO1BFd830SNsBa+2v9XwSO8ou+ZJDJ9BItikiySQcaOww4YoQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAGLOatEwl/V/gGqR9lYBwqEeQVUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84MjRk ZmI1Zi04NTgwLTQ4ZmYtYjMyZS1mZDM5M2ZhN2RjYzQvYWQyMzM2YjAtYjQ3Ni0z NTkzLWExYTQtZDdkODgzMWFmMGI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODI0ZGZiNWYtODU4MC00OGZmLWIz MmUtZmQzOTNmYTdkY2M0LzgyNGRmYjVmLTg1ODAtNDhmZi1iMzJlLWZkMzkzZmE3 ZGNjNC5jcmwwHwYDVR0jBBgwFoAU2YT8ASUa9eXtm7NpUFgxtxJHKZYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84MjRkZmI1Zi04NTgwLTQ4ZmYtYjMyZS1mZDM5 M2ZhN2RjYzQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABLJCv MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFp5fuS5StZlcmUwZZB9tboP6EJMZOSsU2PHSQCTPsPIn0UgfJ75 iB11mOgRBJt7k1HBBUdeR62Zl+60Rj23a7mZewnyK3YFsytVq2+c1o1O5M6pYLIh +w5yvHEjRF+4Fkef302Krv0qwbsv4SDidw77HACiYERrAVYtEfrSUp4uVsoPn0Hn sRXYjSB0MeK/gstRnmrk2u93vPcg6il3WYs7QThxwV9sAQL7o9D7nZfbz2J+yjPP yyCp/f0W/ipXB5sPCuaNDKios6FoEFoenoRgnbhgjYYiLbfctgyLm783dxsxxUMY AwWUdGl1+mguRc29gNXs8Cnu9nAdeK9tvnE= -----END CERTIFICATE-----Generated at Sat Aug 23 17:29:20 2025 by rpki-client